Header add Access-Control-Allow-Origin "*"
Header add Access-Control-Allow-Methods: "GET,POST,OPTIONS,DELETE,PUT"
# Modules must revalidate (ETag 304s stay cheap): heuristic caching served STALE engine files
# after deploys and mixed-version module graphs froze the demo (2026-07-11).
<FilesMatch "\.(js|html|json)$">
Header set Cache-Control "no-cache"
</FilesMatch>
